$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/23a85307-6eb7-34bf-95dd-5561c9a2cb10.roa File: 23a85307-6eb7-34bf-95dd-5561c9a2cb10.roa (raw, json) Hash identifier: /zhDJO5NAkxQhCs9zIY8NrsovuI5z1suo1TUUS99kaw= Subject key identifier: E8:30:D4:0F:D8:49:BC:96:45:0E:10:7C:AE:DD:1E:07:FB:B8:2B:1D Certificate issuer: /CN=d714f85c-7c5b-49fe-8910-f5b808ebb556 Certificate serial: 010D0C9F4328584B4081E059C11D9645264B3100 Authority key identifier: 27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/23a85307-6eb7-34bf-95dd-5561c9a2cb10.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 18646 IP address blocks: 192.234.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:e0:59:c1:1d:96:45:26:4b:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d714f85c-7c5b-49fe-8910-f5b808ebb556 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=53bd6f13-a184-4651-b099-395992ad18e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9c:ba:bd:36:0d:b6:80:66:d7:dc:6d:d5:43: 52:51:c8:e8:7b:73:b4:5c:c5:ef:37:c7:c2:22:33: 1e:0f:34:03:35:f4:27:df:34:d3:45:76:7c:a8:a9: c7:e2:bb:5d:da:0a:b6:58:1c:a6:ea:9d:f2:92:b9: b5:c0:8c:91:5c:d1:fb:22:9c:79:a4:df:20:b4:91: 24:2c:05:43:4c:19:bb:e4:a1:45:ce:80:db:91:e7: 9a:0f:4f:51:8e:8d:2a:02:29:e8:ef:b1:0e:9e:d6: eb:38:f3:ec:30:f6:05:1d:fc:23:b9:98:3d:1d:27: d1:60:12:f1:fb:4e:16:8f:0c:64:82:a9:d8:9a:80: fd:7a:07:92:ab:86:1c:73:cf:13:e9:6d:9a:88:d3: f9:4d:bb:1e:0d:f1:07:a3:4a:7b:13:4a:a6:c7:65: a1:05:2f:20:49:f3:4c:ce:03:7b:d9:9c:75:46:23: 14:43:84:b9:05:55:f7:bc:c6:79:d0:ff:4e:51:f5: 80:ba:02:7d:90:fb:b5:d9:f0:cf:a2:30:1f:f0:3c: 13:82:b1:a8:aa:3a:5d:a0:71:86:47:8b:e9:cb:c0: 84:6e:38:6a:dd:1d:83:df:21:3b:d1:58:a8:7c:d3: 13:01:f0:c8:a0:e4:cf:3b:77:d9:d1:13:0a:9c:48: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:30:D4:0F:D8:49:BC:96:45:0E:10:7C:AE:DD:1E:07:FB:B8:2B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/23a85307-6eb7-34bf-95dd-5561c9a2cb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl X509v3 Authority Key Identifier: keyid:27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer sbgp-ipAddrBlock: critical IPv4: 192.234.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:15:92:09:ec:2f:24:33:9b:d8:a8:99:b1:0f:8a:6b:b7:7d: 34:b0:65:5c:64:8c:f2:c0:c6:15:76:ee:0a:92:e3:44:73:fd: 5e:a5:0c:23:ac:d0:5e:a1:15:6d:e7:53:4c:d4:d7:2b:fd:2c: 7d:d5:be:3b:01:aa:7c:c6:3f:f3:d1:59:6b:b4:69:ab:1d:59: 3f:ca:8b:3b:81:c7:f0:2a:91:15:a7:d0:8a:d7:fa:31:77:8b: fd:1d:05:52:60:af:e5:7e:6e:06:32:7f:5a:b2:22:60:7e:1b: 09:de:4d:3c:65:d5:bb:70:4e:ec:07:2a:7c:1f:21:aa:43:00: cc:e5:ac:37:d7:eb:12:f6:6e:21:b8:b1:28:85:ca:d8:ce:0b: 46:3a:00:5d:a6:b1:3a:7e:3e:82:60:26:a9:6c:74:33:10:4f: 59:7e:af:29:6b:8d:40:77:e3:7b:e2:64:15:c3:f0:39:82:67: de:17:f2:e6:6e:8a:02:83:ae:67:b8:32:4a:c7:15:cf:41:0c: 7d:6a:e3:f6:f5:2c:b3:a6:e6:0d:54:41:2e:5b:54:d6:f1:fb: 68:76:38:c3:43:74:0a:a9:8c:cb:6f:85:8e:e0:b4:34:b3:95: 2c:84:61:7e:96:fe:a9:fc:c4:40:26:47:30:71:87:95:3c:20: 57:8e:fe:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgeBZwR2WRSZLMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcxNGY4NWMtN2M1Yi00OWZlLTg5MTAtZjViODA4ZWJi NTU2MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NTNiZDZmMTMtYTE4NC00NjUxLWIwOTktMzk1OTkyYWQxOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJy6vTYNtoBm19xt1UNSUcjoe3O0XMXvN8fC IjMeDzQDNfQn3zTTRXZ8qKnH4rtd2gq2WBym6p3ykrm1wIyRXNH7Ipx5pN8gtJEk LAVDTBm75KFFzoDbkeeaD09Rjo0qAino77EOntbrOPPsMPYFHfwjuZg9HSfRYBLx +04WjwxkgqnYmoD9egeSq4Ycc88T6W2aiNP5TbseDfEHo0p7E0qmx2WhBS8gSfNM zgN72Zx1RiMUQ4S5BVX3vMZ50P9OUfWAugJ9kPu12fDPojAf8DwTgrGoqjpdoHGG R4vpy8CEbjhq3R2D3yE70ViofNMTAfDIoOTPO3fZ0RMKnEgm1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgw1A/YSbyWRQ4QfK7dHgf7uCsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNzE0 Zjg1Yy03YzViLTQ5ZmUtODkxMC1mNWI4MDhlYmI1NTYvMjNhODUzMDctNmViNy0z NGJmLTk1ZGQtNTU2MWM5YTJjYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDcxNGY4NWMtN2M1Yi00OWZlLTg5 MTAtZjViODA4ZWJiNTU2L2Q3MTRmODVjLTdjNWItNDlmZS04OTEwLWY1YjgwOGVi YjU1Ni5jcmwwHwYDVR0jBBgwFoAUJ8M4rcXfwbZdCCLr4v01Uz7VxgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNzE0Zjg1Yy03YzViLTQ5ZmUtODkxMC1mNWI4 MDhlYmI1NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsVkgnsLyQzm9iombEPimu3fTSwZVxkjPLAxhV27gqS40Rz/V6lDCOs 0F6hFW3nU0zU1yv9LH3VvjsBqnzGP/PRWWu0aasdWT/KizuBx/AqkRWn0IrX+jF3 i/0dBVJgr+V+bgYyf1qyImB+GwneTTxl1btwTuwHKnwfIapDAMzlrDfX6xL2biG4 sSiFytjOC0Y6AF2msTp+PoJgJqlsdDMQT1l+rylrjUB343viZBXD8DmCZ94X8uZu igKDrme4MkrHFc9BDH1q4/b1LLOm5g1UQS5bVNbx+2h2OMNDdAqpjMtvhY7gtDSz lSyEYX6W/qn8xEAmRzBxh5U8IFeO/s4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:06:53 2025 by rpki-client